kernel_hardening_checker/config_files/distros/get-nixos-kconfig.nix

   1 { pkgs ? import <nixpkgs> {}
   2 }:
   3 with pkgs;
   4 stdenv.mkDerivation {
   5   name = "kconf";
   6   nativeBuildInputs = [
   7     linuxPackages_hardened.kernel
   8     linuxPackages_latest.kernel
   9     linuxPackages.kernel
  10   ];
  11
  12   dontUnpack = true;
  13   dontInstall = true;
  14
  15   buildPhase = ''
  16     mkdir  $out
  17
  18     mkdir $out/linuxPackages_hardened/
  19     cp ${pkgs.linuxPackages_hardened.kernel.configfile} $out/linuxPackages_hardened/kernel.conf
  20     echo ${pkgs.linuxPackages_hardened.kernel.version} > $out/linuxPackages_hardened/kernel.version
  21
  22     mkdir $out/linuxPackages_latest/
  23     cp ${pkgs.linuxPackages_latest.kernel.configfile} $out/linuxPackages_latest/kernel.conf
  24     echo ${pkgs.linuxPackages_latest.kernel.version} > $out/linuxPackages_latest/kernel.version
  25
  26     mkdir $out/linuxPackages_lts/
  27     cp ${pkgs.linuxPackages.kernel.configfile} $out/linuxPackages_lts/kernel.conf
  28     echo ${pkgs.linuxPackages.kernel.version} > $out/linuxPackages_lts/kernel.version
  29     '';
  30
  31
  32 }